
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json)
Hash identifier: CuqjnQiyXojQWYuz054+S/VM+Msu8uWd8wQD7zlqiSE=
Subject key identifier: 52:9A:B2:4A:85:C1:95:47:7E:90:EE:8B:88:95:7F:36:12:75:0D:C2
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
Manifest number: 0266
Signing time: Mon 21 Sep 2026 02:30:15 +0000
Manifest this update: Mon 21 Sep 2026 02:30:14 +0000
Manifest next update: Mon 28 Sep 2026 02:30:14 +0000
Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: YevJrGXmP/DrVA8jyarEtjSLY0Me+5sW+ynqnMTZnGo=)
2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: 83mEH4MdqJa2Mi54QCe87Hcel+LeamfIiaKQ+N8+vvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Validity
Not Before: Sep 21 02:30:14 2026 GMT
Not After : Sep 28 02:30:14 2026 GMT
Subject: CN=6ab096b6-46b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:ac:fb:22:1b:af:10:79:88:b0:c8:0f:e6:
3b:e3:86:5b:a5:0b:cc:e2:0a:f9:ac:21:93:af:36:
8e:8e:4b:3a:ca:fa:34:7f:90:8b:d8:f0:69:fd:23:
1c:6f:13:50:fa:9d:19:2e:e9:b9:9c:0a:a2:30:dc:
d2:d5:3f:30:55:d4:a2:36:7c:c0:16:74:e2:2d:ee:
86:06:a3:1e:3d:65:e0:47:42:13:43:9d:d0:f7:19:
b2:22:f9:14:0f:27:f9:a4:3f:f9:ba:f6:7b:f5:da:
f5:22:61:5e:a4:1f:86:39:cc:d7:3b:e0:50:1f:3a:
5d:47:96:30:98:7a:ec:0f:00:7a:33:1d:13:66:23:
c3:07:6d:e0:f5:b5:ed:2b:5e:c1:3a:0e:5f:e9:d4:
ae:33:eb:fc:e3:f4:ae:39:be:4b:36:15:6d:c5:dd:
e0:ea:0d:04:96:25:54:d2:03:85:09:b3:4f:0a:3b:
95:80:46:46:01:9b:b5:33:50:f2:17:b7:7a:13:61:
49:2a:81:8b:05:47:c8:a5:1a:84:2c:e1:45:13:96:
f6:94:f8:37:5a:d7:35:a7:95:15:4f:24:ee:18:54:
0a:ca:ff:39:19:d9:3c:e2:95:17:52:da:80:06:3d:
10:72:f8:cd:da:be:90:1f:f3:cd:5b:ee:c5:da:ff:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9A:B2:4A:85:C1:95:47:7E:90:EE:8B:88:95:7F:36:12:75:0D:C2
X509v3 Authority Key Identifier:
keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:11:5f:15:9d:bf:51:2f:0a:8f:fb:69:76:db:e4:6b:49:75:
d2:f2:89:6f:e9:45:8e:bc:ad:6d:06:9f:b3:29:13:cb:bb:46:
14:58:3c:bd:d6:00:ec:e0:8c:fc:3d:dd:80:59:ed:1a:a3:3e:
e9:e7:37:54:03:68:c8:e5:56:55:3d:44:51:92:28:14:d2:12:
b4:3f:30:f3:9c:46:dd:28:a7:74:77:b5:1b:49:c9:8f:ee:e5:
5a:6c:a5:bb:31:32:15:1d:90:6a:f1:ea:0d:f0:76:bb:24:ab:
6e:71:d1:63:d1:8c:0e:fa:25:c8:d3:df:5c:b9:1a:82:28:97:
75:b5:80:8c:ac:48:7a:07:77:6f:4b:b8:34:02:1a:6d:6b:0d:
0f:d9:7d:a6:d0:91:9a:d6:9e:db:1a:98:47:76:08:09:26:89:
8c:f4:a0:f8:8c:4a:03:1c:08:df:58:cd:8d:42:83:91:69:8b:
aa:e8:ce:27:c7:6d:e4:5a:e1:0d:10:c9:e8:c8:91:91:95:6b:
e2:38:b8:76:50:5c:00:78:e2:61:88:1e:8e:4c:f4:28:00:00:
b7:6d:5e:18:0c:ff:04:85:79:b6:07:3a:7a:0c:90:c4:77:3d:
68:2f:3f:2b:47:b2:e5:b6:61:0d:ae:f2:1e:34:89:28:55:8a:
94:0e:c4:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF
MDgwRENBRTgwHhcNMjYwOTIxMDIzMDE0WhcNMjYwOTI4MDIzMDE0WjAYMRYwFAYD
VQQDEw02YWIwOTZiNi00NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7as+yIbrxB5iLDID+Y744ZbpQvM4gr5rCGTrzaOjks6yvo0f5CL2PBp/SMc
bxNQ+p0ZLum5nAqiMNzS1T8wVdSiNnzAFnTiLe6GBqMePWXgR0ITQ53Q9xmyIvkU
Dyf5pD/5uvZ79dr1ImFepB+GOczXO+BQHzpdR5YwmHrsDwB6Mx0TZiPDB23g9bXt
K17BOg5f6dSuM+v84/SuOb5LNhVtxd3g6g0EliVU0gOFCbNPCjuVgEZGAZu1M1Dy
F7d6E2FJKoGLBUfIpRqELOFFE5b2lPg3Wtc1p5UVTyTuGFQKyv85Gdk84pUXUtqA
Bj0QcvjN2r6QH/PNW+7F2v8z1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKaskqF
wZVHfpDui4iVfzYSdQ3CMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz
RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO
ZWdyVVRDY1gyMV9nZ055dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUBFfFZ2/US8Kj/tpdtvka0l10vKJb+lFjrytbQafsykTy7tGFFg8vdYA7OCM
/D3dgFntGqM+6ec3VANoyOVWVT1EUZIoFNIStD8w85xG3SindHe1G0nJj+7lWmyl
uzEyFR2QavHqDfB2uySrbnHRY9GMDvolyNPfXLkagiiXdbWAjKxIegd3b0u4NAIa
bWsND9l9ptCRmtae2xqYR3YICSaJjPSg+IxKAxwI31jNjUKDkWmLqujOJ8dt5Frh
DRDJ6MiRkZVr4ji4dlBcAHjiYYgejkz0KAAAt21eGAz/BIV5tgc6egyQxHc9aC8/
K0ey5bZhDa7yHjSJKFWKlA7EWg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:20:18 2026 by rpki-client